The vulnerability of the One Drive for Android app, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of the One Drive for Android app is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 allows a attacker to perform a DNS Rebinding attack.

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 router is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to carry out a DNS Rebinding attack remotely...

The vulnerability of Microsoft Windows Defender operating system allows attackers to trigger false alerts and incorrect Windows Defender service responses.

The vulnerability of Microsoft Windows Defender operating system is related to security configuration errors. Exploiting this vulnerability can allow attackers to trigger false alerts and incorrect responses by Windows Defender services...

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to manipulate domain names.

The vulnerability of the Blink display module in Google Chrome browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to perform domain spoofing using a specially created HTML page...

The vulnerability of Google Chrome’s DevTools component allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s DevTools component is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created Chrome extension...

Default configuration

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...

The vulnerability of the multi-connection mode of the Microprogrammable Network Interface Device Firepower Threat Defense (FTD) allows a attacker to exit the container for their own instance of FTD and execute arbitrary commands with root privileges.

The vulnerability of the multi-connection mode of the Firepower Threat Defense FTD software relates to security configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges from within the FTD instance...

The vulnerability in the implementation of the HTTP Live Streaming protocol in Firefox and Firefox ESR browsers, as well as in the Thunderbird email client for Android, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the implementation of the HTTP Live Streaming protocol for Firefox and Firefox ESR browsers, as well as the Thunderbird email client for Android, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the...

The vulnerability of the FortiOS operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the FortiOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using specially crafted SSL/TLS or HTTP traffic...

The vulnerability of the Site Isolation function in Google Chrome web browsers allows attackers to circumvent existing security restrictions.

The vulnerability of Site Isolation in the Google Chrome web browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions by using a specially crafted web page...

The vulnerability of the JunOS operating system, related to security configuration errors, allows attackers to compromise the integrity of protected information.

The vulnerability of the JunOS operating system is related to security configuration errors due to reserved multicast addresses like 224.0.0.x not being correctly aligned with addresses like 224.x.x.x. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

The vulnerability of the application control tool: Windows Defender Application Control (WDAC), a PowerShell Core-based automation tool for application management, allows attackers to bypass the PowerShell Core Constrained Language Mode and compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core-based automation tool, is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass PowerShell Core’s Constrained Language Mode and compromis...

The vulnerability of the Active Directory Federation Services (AD FS) on Windows operating systems allows a perpetrator to bypass the authentication process.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures remotely...

MongoDB Leak Exposed Millions of Medical Insurance Records

An online database belonging to insurance marketing website MedicareSupplement.com was found exposing more than 5 million records with personal information. MedicareSupplement.com is a U.S.-based marketing site that allows users to find supplemental medical insurance available in their area...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software suite relates to security configuration errors, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created page in the vulnerable version of Microsof...

The vulnerability of the Microsoft Dynamics resource planning software, related to security configuration errors, allows a hacker to circumvent existing restrictions on embedded email files.

The vulnerability of the Microsoft Dynamics resource planning software is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on email attachments by intercepting POST requests...

The vulnerability of PowerShell command interpreters in Windows operating systems allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of PowerShell command interpreters in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected information...

Schneider Electric Modicon M580 UMAS strategy read information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS strategy read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of the programmed...